Vulnerabilidades em HCL Software

431 resultados
Análise Vexday

Com 334 CVEs catalogadas e nenhuma registrada no catálogo de exploração ativa da CISA (KEV), o perfil de risco imediato da HCL Software situa-se abaixo da média geral do catálogo, o que sugere pressão operacional menor em termos de resposta emergencial. No entanto, a presença de 10 vulnerabilidades de severidade crítica exige atenção contínua, ainda que nenhuma delas possua prova de conceito pública conhecida no momento. A CVE mais perigosa atualmente apontada é a CVE-2023-37536, com escore EPSS de 0,0138, indicando probabilidade de exploração relativamente baixa, mas não desprezível dentro do horizonte de monitoramento. O tipo de falha mais recorrente — CWE-79 (Cross-Site Scripting) — e o surgimento de 8 novas CVEs nos últimos 90 dias reforçam a necessidade de ciclos regulares de revisão, especialmente em componentes voltados à interface web.

CVE-2025-59873MEDIUMSession Token Exposure via URL Query ParametersEPSS 0.3%CVE-2024-30135LOWSensitive Information Disclosure vulnerability affects DRYiCE AEX v10EPSS 0.3%CVE-2023-37521LOWHCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosureEPSS 0.3%CVE-2024-23560MEDIUMHCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type EPSS 0.3%CVE-2024-23586MEDIUMAn insufficient session timeout vulnerability affects HCL Nomad server on DominoEPSS 0.3%CVE-2024-30111LOWMissing Root Detection vulnerability affects DRYiCE AEX v10EPSS 0.3%CVE-2026-35106MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-35105MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2023-28018MEDIUMHCL Connections s vulnerable to possible denial of service for certain usersEPSS 0.3%CVE-2023-45698MEDIUMHCL Sametime is impacted by clickjackingEPSS 0.3%CVE-2023-23343LOWHCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.EPSS 0.3%CVE-2023-50348LOWImproper Error Handling affects DRYiCE MyXalyticsEPSS 0.3%CVE-2026-35142LOWHCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.EPSS 0.3%CVE-2026-21822MEDIUMA path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).EPSS 0.3%CVE-2023-50346LOWAn information disclosure affects DRYiCE MyXalyticsEPSS 0.3%CVE-2024-42213MEDIUMHCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentEPSS 0.3%CVE-2023-45700MEDIUMHCL Launch is susceptible to an HTML injection vulnerabilityEPSS 0.3%CVE-2023-45721MEDIUMHCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerabilityEPSS 0.3%CVE-2023-28025MEDIUMAn HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management EPSS 0.3%CVE-2023-45720MEDIUMHCL Leap is affected by a disclosure of private personal information vulnerabilityEPSS 0.3%